This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft File: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft (raw, json) Hash identifier: k234mjlZ+D5yY5gJUN7/dh1y0BvZj83Wrr308UxZKr4= Subject key identifier: 8A:86:CC:EF:A8:7F:53:86:85:D8:3E:DA:3D:98:C2:02:9D:3E:37:69 Authority key identifier: 68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC Certificate issuer: /CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Certificate serial: 7BB6D97BEE87793EE683C34A4269F100459A8CFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft Manifest number: 026A Signing time: Mon 22 Dec 2025 08:01:26 +0000 Manifest this update: Mon 22 Dec 2025 07:56:26 +0000 Manifest next update: Thu 25 Dec 2025 14:48:26 +0000 Files and hashes: 1: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: Nm3m5tocLRAVbY4DRmLGKJyvH8opyslr8Wu/151pWIw=) 2: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl (hash: Bk/eMpYQcUcj234R71WH+s/kcV8U+it/aHsTKP4SNqw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b6:d9:7b:ee:87:79:3e:e6:83:c3:4a:42:69:f1:00:45:9a:8c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Validity Not Before: Dec 22 07:56:26 2025 GMT Not After : Dec 25 14:48:26 2025 GMT Subject: CN=8A86CCEFA87F538685D83EDA3D98C2029D3E3769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7e:33:81:bc:87:bb:40:69:93:50:55:ab:98: 12:be:6f:3e:05:36:2b:29:03:fe:b6:a6:d3:79:94: 32:66:de:63:80:3d:44:e4:e8:31:07:1c:e8:11:d4: 7e:4e:6a:a7:ef:b2:ed:48:a0:45:7c:c6:9a:8d:37: b4:f1:64:01:56:f4:78:d1:72:d9:d7:8c:98:7f:a2: 5a:6a:f2:b2:9b:e4:e9:b6:42:6b:8b:f8:b7:d8:dd: ce:b6:de:87:64:eb:f3:a1:c0:97:d8:5f:83:59:aa: b5:89:2b:2c:77:22:60:43:5f:7d:d0:dd:05:8f:ce: e1:af:c4:af:d6:d4:85:71:06:ca:50:fa:d1:1b:f8: 86:28:f9:b4:c2:42:07:97:b6:83:59:2f:4d:ed:4f: 8e:de:a7:9d:a1:3e:c5:6b:e9:10:19:5d:a8:a8:cc: d6:a8:43:2b:1a:92:97:53:19:70:41:76:1f:07:26: ec:cf:ad:90:0b:e2:23:d0:b5:0d:38:34:83:c6:e1: c4:16:72:3f:3c:6b:26:6b:24:e8:bc:90:a5:52:aa: cb:6a:f6:bb:60:9f:2f:4d:cb:8f:60:da:f0:a7:49: 81:83:8b:76:63:f7:63:ca:20:5f:8e:ed:cf:61:d9: 23:5c:11:aa:1a:92:f4:1b:ca:b9:8a:9f:f3:a0:24: a1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:86:CC:EF:A8:7F:53:86:85:D8:3E:DA:3D:98:C2:02:9D:3E:37:69 X509v3 Authority Key Identifier: keyid:68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:48:5b:27:9e:18:74:88:53:e1:ae:5e:cd:8e:9e:01:10:ab: ac:e7:89:a0:ae:26:60:ed:71:39:47:5f:14:6d:ef:78:6a:cb: e8:0c:90:41:d3:38:01:f0:4f:08:ef:a0:07:83:6b:87:d4:27: a7:44:21:05:bb:b7:20:20:7b:99:a4:43:c4:64:43:8e:05:04: b5:e5:be:aa:4d:e1:b9:7d:31:81:51:39:32:b8:39:67:78:53: 29:9f:d4:70:f4:d3:16:ca:7c:a3:7a:32:aa:c2:13:c1:c7:ff: 5f:09:a8:23:67:12:ff:a4:69:9e:4a:e8:b7:7d:26:62:67:1e: c8:2b:df:f8:1e:5b:b2:db:e5:55:f4:dc:f9:20:dc:a1:7f:98: a2:d1:c8:03:08:a1:3f:6e:c9:e8:5e:21:dc:4d:e9:ee:29:43: 4b:6d:d9:87:9c:2c:03:7e:2e:cd:e8:33:aa:0a:6b:eb:0b:fc: 9f:b8:92:94:9d:92:c5:a5:1c:58:53:03:36:13:b4:4b:3d:6c: fd:4e:38:1f:e1:4c:30:84:c8:ca:8c:bf:0a:17:35:5f:55:86: 74:e0:20:ed:16:2e:75:85:11:87:88:9b:2c:fb:ca:15:d9:40: 9e:2f:ad:f8:1d:bf:a1:39:74:b9:db:0f:21:d9:f9:a7:9f:1e: 9f:d7:a7:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe7bZe+6HeT7mg8NKQmnxAEWajP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhB M0Q2MUFFQzAeFw0yNTEyMjIwNzU2MjZaFw0yNTEyMjUxNDQ4MjZaMDMxMTAvBgNV BAMTKDhBODZDQ0VGQTg3RjUzODY4NUQ4M0VEQTNEOThDMjAyOUQzRTM3NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRfjOBvIe7QGmTUFWrmBK+bz4F NispA/62ptN5lDJm3mOAPUTk6DEHHOgR1H5Oaqfvsu1IoEV8xpqNN7TxZAFW9HjR ctnXjJh/olpq8rKb5Om2QmuL+LfY3c623odk6/OhwJfYX4NZqrWJKyx3ImBDX33Q 3QWPzuGvxK/W1IVxBspQ+tEb+IYo+bTCQgeXtoNZL03tT47ep52hPsVr6RAZXaio zNaoQysakpdTGXBBdh8HJuzPrZAL4iPQtQ04NIPG4cQWcj88ayZrJOi8kKVSqstq 9rtgny9Ny49g2vCnSYGDi3Zj92PKIF+O7c9h2SNcEaoakvQbyrmKn/OgJKHBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiobM76h/U4aF2D7aPZjCAp0+N2kwHwYDVR0j BBgwFoAUaIIAFp2TzFXkjF85OIvx+KPWGuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVjMWFlOC1kOTdkLTQwNDgtOWE3ZS02YjcxYjg1Nzc3NDAvMC82ODgyMDAxNjlE OTNDQzU1RTQ4QzVGMzkzODhCRjFGOEEzRDYxQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhBM0Q2 MUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYx RjhBM0Q2MUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMFIWyeeGHSIU+GuXs2OngEQq6zniaCuJmDt cTlHXxRt73hqy+gMkEHTOAHwTwjvoAeDa4fUJ6dEIQW7tyAge5mkQ8RkQ44FBLXl vqpN4bl9MYFROTK4OWd4Uymf1HD00xbKfKN6MqrCE8HH/18JqCNnEv+kaZ5K6Ld9 JmJnHsgr3/geW7Lb5VX03Pkg3KF/mKLRyAMIoT9uyeheIdxN6e4pQ0tt2YecLAN+ Ls3oM6oKa+sL/J+4kpSdksWlHFhTAzYTtEs9bP1OOB/hTDCEyMqMvwoXNV9VhnTg IO0WLnWFEYeImyz7yhXZQJ4vrfgdv6E5dLnbDyHZ+aefHp/Xp3c= -----END CERTIFICATE-----Generated at Tue Dec 23 20:34:26 2025 by rpki-client